CVEs published in September 2008

445 vulnerabilities, 87 critical, 1 exploited.

• camera life life Unrestricted file upload vulnerability in the image upload component in Camera Life 2.6.2b4... CVE-2008-4366 Public exploit 6.5 MediumSeptember 30, 2008
• siteman Cross-site scripting (XSS) vulnerability in search.php in Siteman 1.1.11 and earlier allows... CVE-2008-4365 4.3 MediumSeptember 30, 2008
• parsagostar parsaweb cms SQL injection vulnerability in default.aspx in ParsaGostar ParsaWeb CMS allows remote attackers... CVE-2008-4364 Public exploit 7.5 HighSeptember 30, 2008
• deslock DLMFENC.sys 1.0.0.28 in DESlock+ 3.2.7 allows local users to cause a denial of service (system... CVE-2008-4363 Public exploit 7.2 HighSeptember 30, 2008
• deslock The Virtual Token driver (vdlptokn.sys) 1.0.2.43 in DESlock+ 3.2.7 allows local users to cause a... CVE-2008-4362 Public exploit 4.9 MediumSeptember 30, 2008
• powerportal Directory traversal vulnerability in PowerPortal 2.0.13 allows remote attackers to list and... CVE-2008-4361 Public exploit 7.8 HighSeptember 30, 2008
• spaw editor php Unspecified vulnerability in class/theme.class.php in SPAW Editor PHP Edition before 2.0.8.1 has... CVE-2008-4358 10.0 HighSeptember 30, 2008
• powie plink SQL injection vulnerability in linkto.php in Powie pLink 2.07 allows remote attackers to execute... CVE-2008-4357 Public exploit 7.5 HighSeptember 30, 2008
• kasseler-cms kasseler cms Multiple SQL injection vulnerabilities in Kasseler CMS 1.1.0 and 1.2.0 allow remote attackers to... CVE-2008-4356 Public exploit 7.5 HighSeptember 30, 2008
• powie pforum SQL injection vulnerability in showprofil.php in Powie PSCRIPT Forum (aka PHP Forum or pForum) 1... CVE-2008-4355 Public exploit 7.5 HighSeptember 30, 2008
• net art media iboutique SQL injection vulnerability in the products module in NetArt Media iBoutique 4.0 allows remote... CVE-2008-4354 Public exploit 7.5 HighSeptember 30, 2008
• linkarity SQL injection vulnerability in link.php in Linkarity allows remote attackers to execute arbitrary... CVE-2008-4353 Public exploit 7.5 HighSeptember 30, 2008
• phpsmartcom SQL injection vulnerability in inc/pages/viewprofile.php in phpSmartCom 0.2 allows remote... CVE-2008-4352 Public exploit 7.5 HighSeptember 30, 2008
• phpsmartcom Directory traversal vulnerability in index.php in phpSmartCom 0.2 allows remote attackers to... CVE-2008-4351 Public exploit 7.5 HighSeptember 30, 2008
• vblogix tutorial script SQL injection vulnerability in main.php in vbLOGIX Tutorial Script 1.0 and earlier allows remote... CVE-2008-4350 Public exploit 7.5 HighSeptember 30, 2008
• s0nic paranews Multiple cross-site scripting (XSS) vulnerabilities in news.php in s0nic Paranews 3.4 allow... CVE-2008-4349 Public exploit 4.3 MediumSeptember 30, 2008
• outshine phportfolio SQL injection vulnerability in photo.php in PHPortfolio, possibly 1.3, allows remote attackers to... CVE-2008-4348 7.5 HighSeptember 30, 2008
• powie pnews SQL injection vulnerability in newskom.php in Powie pNews 2.03 allows remote attackers to execute... CVE-2008-4347 Public exploit 7.5 HighSeptember 30, 2008
• talkback Directory traversal vulnerability in TalkBack 2.3.6 and 2.3.6.4 allows remote attackers to... CVE-2008-4346 Public exploit 7.5 HighSeptember 30, 2008
• webportal cms SQL injection vulnerability in download.php in WebPortal CMS 0.7.4 and earlier allows remote... CVE-2008-4345 Public exploit 7.5 HighSeptember 30, 2008
• 6rbscript SQL injection vulnerability in cat.php in 6rbScript allows remote attackers to execute arbitrary... CVE-2008-4344 Public exploit 7.5 HighSeptember 30, 2008
• chilkat software xml activex control The Chilkat XML ChilkatUtil.CkData.1 ActiveX control (ChilkatUtil.dll) 3.0.3.0 and earlier allows... CVE-2008-4343 Public exploit 9.3 HighSeptember 30, 2008
• burnaware technologies burnaware, impressum cdburnerxp, numedia soft dvd burning sdk +2 more NuMedia Soft NMS DVD Burning SDK Activex NMSDVDX.DVDEngineX.1 ActiveX control (NMSDVDX.dll) 1... CVE-2008-4342 Public exploit EPSS 17.2% 9.3 HighSeptember 30, 2008
• myblog add.php in MyBlog 0.9.8 and earlier allows remote attackers to bypass authentication and gain... CVE-2008-4341 Public exploit 7.5 HighSeptember 30, 2008
• google chrome Google Chrome 0.2.149.29 and 0.2.149.30 allows remote attackers to cause a denial of service ... CVE-2008-4340 Public exploit 4.3 MediumSeptember 30, 2008
• symantec netbackup enterprise server, netbackup server +1 more Unspecified vulnerability in the Java Administration GUI (jnbSA) in Symantec Veritas NetBackup... CVE-2008-4339 6.5 MediumSeptember 30, 2008
• vacilanda brilliant gallery SQL injection vulnerability in the brilliant_gallery_checklist_save function in the bgchecklist... CVE-2008-4338 6.0 MediumSeptember 30, 2008
• bitweaver Cross-site scripting (XSS) vulnerability in Bitweaver 2.0.2 allows remote attackers to inject... CVE-2008-4337 4.3 MediumSeptember 30, 2008
• constantin charissis atomic photo album Cross-site scripting (XSS) vulnerability in album.php in Atomic Photo Album (APA) 1.1.0pre4... CVE-2008-4336 Public exploit 4.3 MediumSeptember 30, 2008
• atomic photo album photo album SQL injection vulnerability in album.php in Atomic Photo Album (APA) 1.1.0pre4 allows remote... CVE-2008-4335 Public exploit 7.5 HighSeptember 30, 2008
• cannot php infoboard PHP infoBoard V.7 Plus allows remote attackers to bypass authentication and gain administrative... CVE-2008-4334 Public exploit 7.5 HighSeptember 30, 2008
• cannot php infoboard Cross-site scripting (XSS) vulnerability in PHP infoBoard V.7 Plus allows remote attackers to... CVE-2008-4333 Public exploit 4.3 MediumSeptember 30, 2008
• cannot php infoboard SQL injection vulnerability in the showjavatopic function in func.php in PHP infoBoard V.7 Plus... CVE-2008-4332 Public exploit 7.5 HighSeptember 30, 2008
• phpocs Directory traversal vulnerability in library/pagefunctions.inc.php in phpOCS 0.1 beta3 and... CVE-2008-4331 Public exploit 7.5 HighSeptember 30, 2008
• lansuite Directory traversal vulnerability in index.php in LanSuite 3.3.2 allows remote attackers to... CVE-2008-4330 Public exploit 7.5 HighSeptember 30, 2008
• openengine PHP remote file inclusion vulnerability in cms/system/openengine.php in openEngine 2.0 beta4 and... CVE-2008-4329 Public exploit 10.0 HighSeptember 30, 2008
• easyrealtorpro SQL injection vulnerability in site_search.php in EasyRealtorPRO 2008 allows remote attackers to... CVE-2008-4328 Public exploit 7.5 HighSeptember 30, 2008
• rubyonrails rails, ruby on rails +1 more Rails ActiveRecord gem vulnerable to SQL injection CVE-2008-4094 Fix available 7.5 HighSeptember 30, 2008
• microsoft windows xp gdiplus.dll in GDI+ in Microsoft Windows XP SP3 does not properly handle crafted .ico files,... CVE-2008-4327 Public exploit EPSS 15.7% 4.3 MediumSeptember 30, 2008
• phpmyadmin The PMA_escapeJsString function in libraries/js_escape.lib.php in phpMyAdmin before 2.11.9.2,... CVE-2008-4326 Fix available 4.3 MediumSeptember 30, 2008
• viewvc lib/viewvc.py in ViewVC 1.0.5 uses the content-type parameter in the HTTP request for the Content... CVE-2008-4325 5.8 MediumSeptember 30, 2008
• mozilla firefox The user interface event dispatcher in Mozilla Firefox 3.0.3 on Windows XP SP2 allows remote... CVE-2008-4324 Public exploit 5.0 MediumSeptember 29, 2008
• microsoft windows xp Windows Explorer in Microsoft Windows XP SP3 allows user-assisted attackers to cause a denial of... CVE-2008-4323 Public exploit 4.3 MediumSeptember 29, 2008
• realflex technologies ltd realwin server Stack-based buffer overflow in RealFlex Technologies Ltd. RealWin Server 2.0, as distributed by... CVE-2008-4322 Public exploit EPSS 65.1% 10.0 HighSeptember 29, 2008
• flashget ftp Buffer overflow in FlashGet (formerly JetCar) FTP 1.9 allows remote FTP servers to execute... CVE-2008-4321 Public exploit 9.3 HighSeptember 29, 2008
• mplayer Multiple integer underflows in the Real demuxer (demux_real.c) in MPlayer 1.0_rc2 and earlier... CVE-2008-3827 Fix available EPSS 10.9% 9.3 HighSeptember 29, 2008
• opennms.org opennms Multiple cross-site scripting (XSS) vulnerabilities in OpenNMS before 1.5.94 allow remote... CVE-2008-4320 Public exploit 4.3 MediumSeptember 29, 2008
• libra file manager php filemanager fileadmin.php in Libra File Manager (aka Libra PHP File Manager) 1.18 and earlier allows remote... CVE-2008-4319 Public exploit 6.4 MediumSeptember 29, 2008
• project-observer observer Observer 0.3.2.1 and earlier allows remote attackers to execute arbitrary commands via shell... CVE-2008-4318 Public exploit EPSS 14.1% 10.0 HighSeptember 29, 2008
• debian linux, linux kernel, redhat enterprise linux +2 more fs/splice.c in the splice subsystem in the Linux kernel before 2.6.22.2 does not properly handle... CVE-2008-4302 Public exploit 5.5 MediumSeptember 29, 2008
• Show olderLoading…